This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dwErBg4y7ju9pmEfEjyavtx6haM.roa
File: dwErBg4y7ju9pmEfEjyavtx6haM.roa (raw, json)
Hash identifier: IFWbiFC3fGznVv3UL2phCs5pnMRgsZq69mQ+m9dp8dY=
Subject key identifier: 77:01:2B:06:0E:32:EE:3B:BD:A6:61:1F:12:3C:9A:BE:DC:7A:85:A3
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019B7F150F01F4AE91C0CAA68073FC69151B
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dwErBg4y7ju9pmEfEjyavtx6haM.roa
Signing time: Fri 02 Jan 2026 14:20:45 +0000
ROA not before: Fri 02 Jan 2026 14:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205533
IP address blocks: 2a14:c380:380::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:0f:01:f4:ae:91:c0:ca:a6:80:73:fc:69:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jan 2 14:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77012b060e32ee3bbda6611f123c9abedc7a85a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:05:cb:7d:af:6d:7e:f3:5c:87:a1:65:84:
00:c4:5c:0e:35:5f:7b:60:9e:56:76:e6:34:8a:a8:
eb:05:41:5c:3e:5d:9f:52:db:96:f5:88:d4:76:d0:
8c:d5:d9:bd:b5:2d:1a:80:e9:03:a1:8c:0b:17:13:
81:df:45:dd:ec:8a:bd:74:3e:11:ba:b3:16:1e:29:
be:88:a2:8d:d4:25:03:8f:68:94:2d:38:55:fd:34:
00:4d:58:14:e7:54:39:d6:99:a7:28:7c:40:f0:4b:
bd:bd:fd:af:61:02:63:f0:44:e7:1b:e6:ac:12:9a:
12:ab:29:a1:a3:27:2d:19:4b:70:9e:b7:4b:60:a1:
e3:83:c9:6a:de:e6:39:c3:63:cd:5d:e7:41:b8:e1:
64:83:24:1c:60:af:6b:e9:ef:bf:eb:86:6a:2e:fa:
3b:e0:a7:8d:f2:06:ef:97:31:86:2d:cb:4f:0b:b3:
2f:30:be:fb:fe:ac:0c:d8:25:7b:7d:ba:ff:bd:a8:
a5:88:b8:b2:e6:6c:cb:7c:82:3f:90:07:30:0e:2c:
5b:70:78:d8:1c:87:6d:3a:b9:33:19:dd:b4:fb:ca:
6d:af:42:da:a2:a4:8d:bc:8a:64:2c:b3:1e:92:ec:
6d:aa:e0:16:b3:4b:83:56:86:8e:3d:6e:f2:76:fa:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:01:2B:06:0E:32:EE:3B:BD:A6:61:1F:12:3C:9A:BE:DC:7A:85:A3
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/dwErBg4y7ju9pmEfEjyavtx6haM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:380::/44
Signature Algorithm: sha256WithRSAEncryption
60:c9:fb:45:28:9f:0a:06:8e:dc:6e:0e:71:b2:86:c3:18:be:
7e:23:e4:1f:63:6f:39:62:3c:89:78:32:c9:bb:da:95:6c:ea:
ad:10:f2:72:f0:44:54:94:4c:b2:94:e2:c3:bb:90:6d:e0:b2:
0b:2a:c5:c1:e7:7a:20:7a:1a:31:ac:cb:65:07:28:76:65:8e:
cb:99:61:e1:49:e2:b5:ec:3c:53:af:75:02:1b:86:22:b8:4e:
0e:60:fd:91:46:fb:b0:bd:6b:0e:9d:49:52:54:e7:92:c6:53:
35:c5:b0:c9:f7:4e:3f:af:f1:5e:75:13:7e:48:ca:82:39:4f:
2d:f7:ba:e0:82:e1:9c:f0:e0:42:11:f3:d4:37:76:08:ce:86:
4f:7a:b2:ba:9f:a3:83:74:12:b7:7e:8e:2e:aa:4c:9d:d9:75:
76:5a:13:e4:9a:28:d1:63:51:c0:9f:5b:3e:2c:42:32:77:58:
a7:31:85:8a:b4:7b:33:fb:b4:d9:96:83:70:12:22:7b:66:93:
9b:53:11:6c:45:99:f0:b3:c3:98:60:f6:89:07:ec:27:85:4d:
9c:27:91:04:72:de:ae:5e:95:f6:c4:45:63:bf:bf:4c:de:ca:
40:b9:15:23:53:5e:2c:9c:0e:1d:f7:0c:8d:13:5a:01:56:49:
3a:5d:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:47 2026 by rpki-client